CVE-2026-61440— PraisonAI Platform before 0.1.9 Authorization Bypass via Label Endpoints
Quick assessment
Affected
MervinPraison PraisonAI
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
MervinPraison PraisonAI是MervinPraison个人开发者的 MervinPraison PraisonAI 0.1.9之前版本存在授权问题漏洞，该漏洞源于对标签和问题标签变更的授权不足，可能导致工作区成员重命名和重新着色共享标签，以及在所有者创建的问题上添加或删除标签。具有工作区成员权限的攻击者可以利用PATCH和POST/DELETE端点更改共享标签分类，并在没有所有者或管理员授权的情况下操纵问题标签关联。
Possible ATT&CK Techniques 1 AI
T1078 · Valid AccountsAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| MervinPraison | PraisonAI | < 0.1.9 |
affected |
0.1.9 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-61440
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PraisonAI Platform before 0.1.9 Authorization Bypass via Label Endpoints
Source: CVE Program / CVE List V5
Vulnerability Description
PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to alter shared label taxonomy and manipulate issue-label associations without owner or admin authorization.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
MervinPraison PraisonAI 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MervinPraison PraisonAI是MervinPraison个人开发者的 MervinPraison PraisonAI 0.1.9之前版本存在授权问题漏洞，该漏洞源于对标签和问题标签变更的授权不足，可能导致工作区成员重命名和重新着色共享标签，以及在所有者创建的问题上添加或删除标签。具有工作区成员权限的攻击者可以利用PATCH和POST/DELETE端点更改共享标签分类，并在没有所有者或管理员授权的情况下操纵问题标签关联。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MervinPraison | PraisonAI | 0 ~ 0.1.9 | - |
|
II. Public POCs for CVE-2026-61440
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-61440
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-61440 (2)
Same Patch Batch · MervinPraison · 2026-07-15 · 11 CVEs total
| CVE-2026-61436 | 8.6 HIGH | PraisonAI before 4.6.78 Missing Webhook Signature Verification |
| CVE-2026-61430 | 8.5 HIGH | PraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawl |
| CVE-2026-61446 | 8.4 HIGH | PraisonAI before 1.6.78 Remote Code Execution via Plugin Auto-Discovery |
| CVE-2026-61435 | 8.2 HIGH | PraisonAI before 4.6.78 Authentication Bypass via Host Header Spoofing |
| CVE-2026-61443 | 8.1 HIGH | PraisonAI before 1.6.78 Remote Code Execution via SkillTools |
| CVE-2026-61433 | 7.8 HIGH | PraisonAI before 4.6.78 Code Injection via API deployment generator |
| CVE-2026-60085 | 7.5 HIGH | PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess Sandbox |
| CVE-2026-61427 | 7.3 HIGH | PraisonAI before 4.6.78 Authentication Bypass via HTTP-stream |
| CVE-2026-61438 | 7.3 HIGH | PraisonAI before 4.6.78 Remote Code Execution via Broken AST Sandbox |
| CVE-2026-60087 | 6.1 MEDIUM | PraisonAI before 1.6.78 Tool Approval Cache Bypass |
IV. Related Vulnerabilities
Same product: PraisonAI
-
CVE-2026-57147
praisonai-platform: default JWT signing secret 'dev-secret-c -
CVE-2026-57148
praisonai-platform 0.1.4 still boots on the hardcoded JWT se -
CVE-2026-57140
PraisonAI AgentOS exposes unauthenticated agent listing and -
CVE-2026-57139
PraisonAI MCPServer exposes unauthenticated HTTP tools/call -
CVE-2026-57133
PraisonAI utility shell safe-command wrapper allowlist bypas
Same vendor: MervinPraison
-
CVE-2026-57147
praisonai-platform: default JWT signing secret 'dev-secret-c -
CVE-2026-57148
praisonai-platform 0.1.4 still boots on the hardcoded JWT se -
CVE-2026-57140
PraisonAI AgentOS exposes unauthenticated agent listing and -
CVE-2026-57139
PraisonAI MCPServer exposes unauthenticated HTTP tools/call -
CVE-2026-57133
PraisonAI utility shell safe-command wrapper allowlist bypas
Same weakness: CWE-862
-
CVE-2026-102365
mall4j through 4.0 Missing Authorization in Admin User Addre -
CVE-2026-101139
Webkul Bagisto Invoice Mass Status Update state authorizatio -
CVE-2026-96538
WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_l -
CVE-2026-86335
LXD Cross-Project Private Image Theft via Unsanitized GetIma -
CVE-2026-82377
Apache Roller: Missing weblog authorization in XML-RPC Blogg
V. Comments for CVE-2026-61440
No comments yet